Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/929D0EB616A611ED86A3EF0CC4F9AE02.roa
File:                     929D0EB616A611ED86A3EF0CC4F9AE02.roa (raw, json)
Hash identifier:          40hAMMqtmR9OFYV238H783mmTwcTvAqPIgysA2ivdOc=
Subject key identifier:   81:88:3F:F8:80:97:EA:E0:C3:8C:0E:B9:95:B1:54:C1:66:A9:4B:CC
Certificate issuer:       /CN=A91F6D55/serialNumber=A18CD3FE82AD21803C1F0B132DAD83D1C354934B
Certificate serial:       0329
Authority key identifier: A1:8C:D3:FE:82:AD:21:80:3C:1F:0B:13:2D:AD:83:D1:C3:54:93:4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYzT_oKtIYA8HwsTLa2D0cNUk0s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/929D0EB616A611ED86A3EF0CC4F9AE02.roa
Signing time:             Sat 13 Jun 2026 01:29:39 +0000
ROA not before:           Sat 13 Jun 2026 01:29:39 +0000
ROA not after:            Fri 30 Jul 2027 00:00:00 +0000
asID:                     56294
IP address blocks:        103.150.246.0/24 maxlen: 24
                          103.150.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.crl
                          rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYzT_oKtIYA8HwsTLa2D0cNUk0s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:29:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 809 (0x329)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F6D55, serialNumber=A18CD3FE82AD21803C1F0B132DAD83D1C354934B
        Validity
            Not Before: Jun 13 01:29:39 2026 GMT
            Not After : Jul 30 00:00:00 2027 GMT
        Subject: CN=6a2cb283-455d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:b8:7f:1f:2e:58:59:24:46:ac:2a:b8:f7:f5:
                    d6:4b:77:df:11:fd:cb:74:6c:34:4f:be:52:b0:c6:
                    93:f1:54:44:f1:99:fe:11:7e:ec:79:2f:ef:ed:d0:
                    db:12:79:9a:c8:68:19:66:3c:82:46:3a:f4:8a:7f:
                    e0:97:ff:6d:bf:04:31:32:62:55:06:56:77:d4:1a:
                    75:c7:22:19:73:ef:85:60:02:b5:50:66:3e:bf:5e:
                    f2:d2:b0:9a:1a:41:9d:f7:80:0c:cd:93:59:64:19:
                    f0:46:bb:50:4a:1e:e8:05:b4:66:d7:5f:1f:70:0d:
                    be:63:e6:73:d2:63:cd:3f:86:c4:df:d2:70:03:92:
                    e1:c4:0f:da:b4:8a:ff:79:b1:e1:28:03:7d:e8:fa:
                    7a:d7:ad:85:a0:9e:20:a0:5c:6b:cb:07:e3:1e:d0:
                    8a:fe:6e:c0:e1:bd:85:af:89:07:42:a9:55:13:b3:
                    cd:84:11:ba:58:f6:13:f0:11:59:ae:85:22:02:7b:
                    ad:d1:6c:2d:8a:2b:77:fd:68:f7:d0:9b:45:32:da:
                    6e:83:de:65:c9:0d:23:71:ec:3c:d0:cb:1f:68:8f:
                    de:a7:a7:15:c3:6f:c0:1b:9c:79:bb:73:43:61:fe:
                    3c:4d:2e:14:eb:9c:04:db:ad:24:2d:57:6c:2e:19:
                    e5:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:88:3F:F8:80:97:EA:E0:C3:8C:0E:B9:95:B1:54:C1:66:A9:4B:CC
            X509v3 Authority Key Identifier:
                keyid:A1:8C:D3:FE:82:AD:21:80:3C:1F:0B:13:2D:AD:83:D1:C3:54:93:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/oYzT_oKtIYA8HwsTLa2D0cNUk0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oYzT_oKtIYA8HwsTLa2D0cNUk0s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F6D55/2BA7395E16A411EDA838110BC4F9AE02/929D0EB616A611ED86A3EF0CC4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.150.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         ae:83:de:26:38:a4:9e:4a:5b:fc:70:0c:c1:eb:41:1e:51:69:
         25:97:a8:ff:2f:7c:1a:20:95:94:e7:f9:c6:62:2a:3a:dd:1e:
         b1:1c:a7:1a:8c:05:80:9c:2a:73:cb:8c:17:ca:0f:e7:d0:07:
         6f:45:4b:a6:76:f5:00:6a:99:d9:97:68:a2:ab:ab:c4:14:77:
         ad:d6:71:5d:2b:86:6a:18:12:b7:ad:d9:2b:38:f5:18:6c:cb:
         4b:86:3d:09:8a:21:d4:48:d6:7a:d8:8f:f8:8c:f2:82:27:5d:
         c1:b5:fa:1f:9c:ca:b5:1c:e0:78:20:82:da:ca:b9:09:c6:e1:
         3f:dd:a4:65:79:9e:0e:dc:3b:6c:8d:b2:d5:2f:26:b6:70:87:
         af:be:11:70:d3:2f:65:68:a4:76:48:01:10:e4:63:18:45:c8:
         24:f9:dc:b8:d5:63:eb:f4:d6:4b:bb:87:8f:b8:e9:d4:74:0d:
         d6:9a:4d:35:ec:d2:13:77:19:f7:be:ee:fb:7f:d0:fc:1f:31:
         4b:00:68:73:8e:3b:7f:07:ae:f1:59:11:ad:d7:73:ae:2e:eb:
         c4:1c:76:52:18:5a:5e:55:66:dd:4b:3f:73:1a:ec:96:d9:11:
         af:01:8b:c1:8b:65:4c:fa:da:18:ea:d6:de:65:34:dc:55:0a:
         b6:e1:ba:4f
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAykwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjZENTUxMTAvBgNVBAUTKEExOENEM0ZFODJBRDIxODAzQzFGMEIxMzJEQUQ4M0Qx
QzM1NDkzNEIwHhcNMjYwNjEzMDEyOTM5WhcNMjcwNzMwMDAwMDAwWjAYMRYwFAYD
VQQDEw02YTJjYjI4My00NTVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7bh/Hy5YWSRGrCq49/XWS3ffEf3LdGw0T75SsMaT8VRE8Zn+EX7seS/v7dDb
EnmayGgZZjyCRjr0in/gl/9tvwQxMmJVBlZ31Bp1xyIZc++FYAK1UGY+v17y0rCa
GkGd94AMzZNZZBnwRrtQSh7oBbRm118fcA2+Y+Zz0mPNP4bE39JwA5LhxA/atIr/
ebHhKAN96Pp6162FoJ4goFxrywfjHtCK/m7A4b2Fr4kHQqlVE7PNhBG6WPYT8BFZ
roUiAnut0Wwtiit3/Wj30JtFMtpug95lyQ0jcew80MsfaI/ep6cVw2/AG5x5u3ND
Yf48TS4U65wE260kLVdsLhnlXQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFIGIP/iA
l+rgw4wOuZWxVMFmqUvMMB8GA1UdIwQYMBaAFKGM0/6CrSGAPB8LEy2tg9HDVJNL
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNkQ1NS8yQkE3Mzk1RTE2
QTQxMUVEQTgzODExMEJDNEY5QUUwMi9vWXpUX29LdElZQThId3NUTGEyRDBjTlVr
MHMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL29ZelRfb0t0SVlBOEh3c1RMYTJEMGNOVWswcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
RjZENTUvMkJBNzM5NUUxNkE0MTFFREE4MzgxMTBCQzRGOUFFMDIvOTI5RDBFQjYx
NkE2MTFFRDg2QTNFRjBDQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBZ5b2MA0GCSqGSIb3DQEBCwUAA4IBAQCug94mOKSeSlv8cAzB60Ee
UWkll6j/L3waIJWU5/nGYio63R6xHKcajAWAnCpzy4wXyg/n0AdvRUumdvUAapnZ
l2iiq6vEFHet1nFdK4ZqGBK3rdkrOPUYbMtLhj0JiiHUSNZ62I/4jPKCJ13Btfof
nMq1HOB4IILayrkJxuE/3aRleZ4O3DtsjbLVLya2cIevvhFw0y9laKR2SAEQ5GMY
Rcgk+dy41WPr9NZLu4ePuOnUdA3Wmk017NITdxn3vu77f9D8HzFLAGhzjjt/B67x
WRGt13OuLuvEHHZSGFpeVWbdSz9zGuyW2RGvAYvBi2VM+toY6tbeZTTcVQq24bpP
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:51:07 2026 by rpki-client